Bastion
guest@6admin.io:~$ ls ~/tags/bastion
The Bastion and Guacamole: the two leaves of the front door
OVHcloud's The Bastion for shell people, Apache Guacamole for desktop people: two approaches to the same question, who may touch what and who looked at what.
SSH Hardening: the 2017 Trilogy Reread in 2026
In 2017 I answered a naive SSH hardening article in three comments: root, port, keys. Nine years later the principles hold, the context changed: bastions, native Windows, the client supply chain and the physical threat no config covers.